Checkmarx WebClient Login Panel - Detect

What is the "Checkmarx WebClient Login Panel - Detect?"

The "Checkmarx WebClient Login Panel - Detect" module is designed to detect the presence of the Checkmarx WebClient login panel. This module targets the Checkmarx WebClient software and helps identify potential misconfigurations or vulnerabilities. The severity of this module is classified as informative, meaning it provides valuable information but does not pose an immediate threat.

This module was authored by joanbono.

Impact

The detection of the Checkmarx WebClient login panel does not directly indicate any impact or vulnerability. However, it can provide insights into the configuration of the Checkmarx WebClient software and help identify potential security risks.

How does the module work?

The "Checkmarx WebClient Login Panel - Detect" module works by sending an HTTP GET request to the "/cxwebclient/Login.aspx" path. It then applies a matching condition to check if the response body contains the string "/CxWebClient/webApp/Scripts/libs/authenticationScripts". If this condition is met, the module considers the Checkmarx WebClient login panel to be present.

Here is an example of the HTTP request sent by the module:

GET /cxwebclient/Login.aspx

The module uses the following matching condition:

Response body contains "/CxWebClient/webApp/Scripts/libs/authenticationScripts"

The module's purpose is to detect the presence of the Checkmarx WebClient login panel based on the defined matching conditions.